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Abstract 

NP-complete problems should be hard on some instances but these may be extremely rare. On generic 
instances many such problems, especially related to random graphs, have been proven easy. We show the 
intractability of random instances of a graph coloring problem: this graph problem is hard on average 
unless all NP problem under any samplable (i.e. generateable in polynomial time) distribution are easy. 


1 Introduction 

Many NP-complete problems are easy for random inputs. See [Karp 76] and the surveys [Johnson 84, 
Karp et. al. 85]. For instance, the Hamilton path problem takes linear average time [Angluin Valiant 79, 
Gurevich Shelah 87]. In such cases, NP-completeness may be misleading as an evidence of hardness, say, 
for use in cryptography as required in [Blum Micali 82, Yao 82, Goldreich Goldwasser Micali 86]. Such a 
disappointment has happened with the Knapsack problem [Shamir 82, Lagarias Odlyzko 83]. 

Another misinterpretation may cause premature abandoning of the search for algorithms that are efficient 
on all but extremely rare and peculiar instances. Some such algorithms are neat and simple, e.g. the graph 
isomorphism algorithm in [Babai Erdos Selkow 80]. Some problems (decoding of linear codes, versions of 
graph coloring and independent sets, etc.), however, have eluded such “average case attacks”. So, one needs 
stronger hardness results related to “typical” or “average” instances of the problem. Such hardness would 
be sensitive to the choice of a particular NP-complete problem and the input distribution. 

As an evidence that a problem with a particular distribution is “hard on average”, we use a notion 
analogous to NP-completeness: our problem has no fast on average solution, unless every NP problem under 
every samplable distribution has one. I that case there is no chance to generate, in polynomial time, hard NP 
instances and the P=?NP question becomes academic. Other examples are given in [Levin 86, Gurevich 90]. 
These papers show that some NP problems with uniform probability distributions (Tiling, Graph Coloration, 
Matrix Decomposition, etc.) are average case complete. This concept was further analyzed in [Ben-David 
Chor Goldreich Luby 89, Impagliazzo Levin 90, Blass Gurevich 91, Venkatesan Rajagopalan 92, Wang 96] 
and other works. 

Normally, in an NP-completeness proof A <f B, the reduction / (of A to B ) uses intractable structures, 
which may not occur in the generic inputs of B. The outputs of / may constitute only a negligible fraction 
of instances of B except under strange distributions like the one generated by / itself. Thus, the “hard 
instances” of B 1 may be extremely rare, and the problem may be easy on average under the distributions 
of interest. The requirement to avoid concentrating outputs to negligible sets makes reductions harder to 
design. 

Below, we show the first such simple problem on graphs. This hardness result is to be contrasted with 
previous works that used random graphs only to point out that many NP-complete problems are easy on 

*A version of this appears in [Venkatesan Levin 88]. 
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average. Moreover, [Gurevich 87] has shown, average case completeness of a random graph problem is 
unlikely (i.e., unless DEXP=NEXP) without introducing randomizing reductions as we do here. 

To motivate our problem, we restate that the standard edge coloring problem in terms of the 3-node 
induced colored subgraphs (called colored 3-graphs for short) of such an edge colored graph: Given a graph 
and m colors, edge color it such that every colored 3-graph does not contain two edges of the same color. 
We generalize the notion of coloring by allowing the list C of permissible types of colored 3-graphs to be 
arbitrary. The usual edge coloring problem needs m to be unbounded in general, while a given C' may need 
only constantly many colors. As C' poses only local restrictions, we specify an additional global parameter: 
an integer k for the number of times a special “blank,” or “absent” color (or more generally one for every 
color) is used. Set C = ( C',k ). Now this formalism gains notable power to express many graph problems. 
Our first example is the bipartite matching problem on a 2 n node graph using colors green and blank: choose 
C' to contain colored 3-graphs each with at most one blank edge and (the distinguished color) blank be used 
exactly n times. As a second example, one can specify t-clique problem by choosing C' using blank between 
those and only those nodes with blank self-loops and specify that blank be used (*) times. 

Our graphs will be directed and we will use three (beside blank) colors grey, green, red. A random choice 
of C consists of picking C' as a random subset of all possible 5 9 colorings and choosing an integer k at 
random [l,n 2 ]. Note that in the examples above a random C will be good with constant probability and a 
random k with probability 1/n 2 . 

Now, our problem admits a simple statement: Given a random digraph and a randomly chosen (C 1 , k), 
color the graph so that every colored triangle is in C' and the distinguished color blank is used k times. 
Using a randomizing reduction we show the completeness of the problem in the average case; it easily follows 
from the definitions that if this problem is easy on average, complexity theory based cryptography will be 
impossible. We hope the techniques used here may be useful in analyzing some other random graph problems. 


2 Basic Concepts and Claims 

2.1 Remarks On Some Definitions 


We briefly review the motivations behind the definitions. [Johnson 84] (also see [Gurevich 91]) gives a good 
account of some of the issues in average case analysis of NP-problems. Recall that a reduction A <f B 
between two NP problems preserves the worst case hardness in the sense that some instances of B D f(A) 
are at least as hard as those of A. This can fail in the average case. For example, let A be the discrete 
logarithm problem (dlog) over integers modulo a prime p (i.e., given {g,g x ,p) find x), B be the Hamilton 
Path problem over graphs and / be the standard reduction guaranteed by NP-completeness. Best known 
DLOG algorithms using advanced number field sieve methods (see [Lenstra, Lenstra 91]) run in conjectured 
time exp^logp) 1 / 3 (loglogp ) 2 ^ 3 ), whereas relatively simple algorithms [Gurevich Shelah 87] solve Hamilton 
Path problem in linear time for all but negligible fraction of instances. In contrast, DLOG should be hard on all 
but negligible fraction of instances if it is hard on some polynomial fraction, since it is random self-reducible. 

Average case completeness studies NP problems with distributions on its inputs and allows one to compare 
average case hardness of a pair of problems using reductions that preserve average case complexity. A 
condition for this is that reductions must map typical instances of one problem into typical instances of 
another. But new difficulties arise with the definitions of distributions and averaging runtimes. We point 
out some of them next, and the definitions in section 2.2 are chosen to circumvent them. 


To state and prove completeness results, it is enough to consider distributions defined on all finite binary 
strings. For example, instead of the uniform distribution on {0,1}™, one may consider A over S = {0,1}* 
defined as follows: choose the length n with probability n ^ +1 ^ and then a string in {0,1}" with probability 


One may wish to further quantify the fraction of hard instances of length n of a specific complete problem 
precisely by focusing on distributions {0,1}" and the structure of the problem. Our completeness results are 
only up to polynomial factors in probability and, thus, in average running time. This is similar to the worst 
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case reduction theory, which ignores polynomial factors in run times. 

It is essential to consider reductions to (or hardness of) problems with specific distributions. As noted 
earlier if A is hard on average under some distribution, and A <f B, then so is B under the induced 
distribution of /’s outputs; but this may not correspond to any interesting distribution. If B is a problem 
on graphs, it will be desirable, to show the reducibility under common distributions (e.g. uniform) 

In the absence of spectacular progress (beyond settling P ^ NP and its average case version) to prove 
concrete lower bounds on hard problems for specific input lengths, such reductions may be the only recourse 
e.g., for cryptography. 

Notations: We use O, o, f2, 0 notations in the usual sense and all our strings and logarithms are binary. 
We shall write a f(n) = l/o(l) if / tends to oo. We denote by ( x,y) the pair x,y. We allow probability 
distributions to sum to < 1 by assuming that our algorithms output a nil symbol with some probability. A 
distribution p is samplable if there is a randomized algorithm which outputs string x in time la;! 0 ! 1 ) with 
probability ^({x}). The set of all finite binary strings we denote S. 

2.2 Random Inversion Problems and Reductions. 

We use a constructive version of NP: the witnesses must be explicitly produced. It is convenient to refer to 
them in the inversion form: for an algorithm / with |w| = |/(u;)| 0 W, given an instance x, find a “witness” 
w £ / _1 (a:). E.g. /((a, b)) may output the graph a , if b is its Hamiltonian cycle (or a dirty swear, otherwise). 
A random inversion problem is a pair (p, /) where / is computable in polynomial time and the distribution 
p of the instances is samplable. So, our random inversion problems are the NP problems whose instances are 
generated by coin-flipping polynomial time algorithms. The choice of a particular distribution p is significant, 
since two different distributions may concentrate on different subsets of instances thus specifying completely 
unrelated problems. 

Our reductions require explicit mappings between witnesses. We define reductions and randomizations of 
random inversion problems slightly simplifying [Venkatesan, Levin 88]. A reduction of an inversion problem 
(/i, /) to an inversion problem (z/, g) is a pair of polynomial time algorithms R , Q such that: 

1. the probability that any y ^ nil is output by R on p— distributed inputs is 0{v({y})). I.e. typical 
instances are mapped into typical instances; 

2. R. maps a solvable instance x of (p, f) into a solvable instance y of (v, g): for D = {x : p{{x}) > 0}, 
S:={0,l}*,R(f(S)nD)Cg(S)md 

3. a witness for an instance produced by -R can be efficiently transformed by Q into a witness for x: if 
R(x) = g(w), x £ D then x = /(<5(w)).ljl 

Reductions are closed under composition and any fast on average algorithm for (i/, g) yields a fast on average 
algorithm for (/x, /). By R(g), we denote the output distribution of R when the input distribution is p. 

We now modify problems by supplementing the instances with coin flips which can be used in reductions. 
We say (p', /') is a randomization of (p, /), if there is some constant c and a set S x of strings of length |a;| c 
of measure A (S x ) = \x\~°^ such that 

1. p 1 ({(x,u)}) is /z({x:})A({w}) when u> £ S x , and zero otherwise and 

2. f'(<x,u)>) = </( x),u>, i.e. /' ignores the padding ui, |w| = |a:| c . 

Remark 1 S x consists of those “helpful” strings u> which allow R to output instances x' whose witnesses 
w' can be transformed by Q into witnesses w of x, if any. It is not necessary to be able to test in polynomial 
time if u £ S x . But a random u> has a polynomial probability to be in S x and the trials can be repeated 
to make the probability of failure exponentially small. If we do not find an inverse for / this way, we know 
that it has no inverses at all. 

1 The polynomial time requirement is essential for R only on average over x. This allows a possibility to generalize complete¬ 
ness to problems, whose worst-case versions are not NP-complete. 
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A main goal of these definitions is to guarantee the following, which by now should be obvious: any fast 
on average deterministic or randomized algorithm for a randomization B of an inversion problem A yields a 
fast on average randomized algorithm for A. Hence there is no need to require that w be transformed into w' 
efficiently. Note that S x and thus p' itself need not be polynomial time computable. In fact, some properties 
of the outputs of our reductions are not known to be efficiently verifiable. 

Definition: A random inversion problem (p,, /) is complete if every random inversion problem has a 
randomization reducible to (//, /). 

The average complexity of (//, /) is an upper bound T(k) for the time needed to compute y £ f~ 1 (x) 
expressed in terms of k{x ) = |a:|r(a;), where the instance’s “rareness” or “exceptionality” r, as in section 2, 
satisfies Y2 t l ({ x }) r ( x ) < 00 ■ Reductions and randomizations preserve average complexity (up to a poly¬ 
nomial) as well as completeness. Note that complete problems must have many easy instances, since both 
hard and easy problem are reducible to them. Note also that two problems under two distributions p and 
p' such that p(x)/p(x') or mu(x)/p(x') is bounded by at most a polynomial in \x\ then they have the same 
randomization since the polynomial factors in distributions can be absorbed by definition. For example, 
here one can take p{x) as uniform distribution on primes of length n and p'{x) be uniform distribution of 
all numbers of length n. 

2.3 Main Result 

Our graphs are directed and a node may have a self-loop, which may be colored as well. Let Q be an edge 
colored digraph. An edge may be colored with one of the three colors red, green, gray or left blank. Blank 
like any other color and we distinguish it in the sense that we (implicitly) specify how many of the edges 
must use blank; we do this by explicitly specifying the total number of colored edges that use the other three 
colors. More generally we could have specified how many times each color is used. 

A spot in Q is a 3-node subgraph with induced colored edges and the nodes unlabeled (i.e. replaced by 1, 
2, 3). So there are 5 9 distinct spots. The coloration C(Q) is the set of all spots in Q and an integer specifying 
the number of blank edges; G = Q is the Q uncolored. As noted in the introduction, standard graph coloring 
restricts the set of spots so that all edges in a spot have different colors. We choose a random restriction 
instead. 

We similarly have 2-node spots called links. A triangle is a spot with the node labels preserved. 

Graph Coloration Problem: Invert the function R{Q) = {G,C(Q)), i.e. color the edges of a given 
graph to achieve the given coloration. 

Distribution: Uniform. I.e. choose a length with probability and then digraph on n nodes with 

probability l/2 n , a set of spots among all possible ones with probability 1 /2 s9 , and the number of colored 
(i.e, non-blank) edges with probability n~ 2 . 

We could use as well the monotone variation of the coloration requirement: to achieve the coloration 
which is a subset of the specified one. 

Theorem 1 Graph Coloration is a complete random inversion problem. 


Outline of the paper. The rest of the paper is devoted to proving the theorem. In the next section we 
discuss a tiling problem which we reduce to our graph coloring problem. (Strictly speaking, we define a more 
specialized version in the last section ^ that we reduce, but its details are not necessary for the intervening 
sections.) Since we need to represent a tiled-square (a solution for the Tiling problem) as a colored graph, 
we next prove random graph lemmas (in section^) useful for finding necessary 2-dimensional grid structures 
which can be suitably edge colored to display a tiling solution. Then,we present our reduction in section 4.1. 
This can be viewed as an algorithm that generates an almost uniformly distributed (Proposition [I]) random 
graph with an embedded instance of a random tiling problem. 

Then what remains is to show (Proposition |j) that any adversary coloring our graph instance will 
necessarily embed a solution for the tiling problem in the colored graph. Intuitively, the tournament allows 
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us to assign a unique label to each node (based on its edges to the tournament) and thus in some sense orient 
the whole graph; the tournament plays a crucial boot-strapping role in forcing the adversary to identify the 
necessary grid structures including some for which no polynomial time algorithms are known to exist (see 
lemma 3). In section 7.5 we show that all the structures that we just mentioned and additional ones needed 
to force the adversary to color as we desire exist jointly in random graphs with desired probability; these 
structures are described incrementally throughout the paper. Our proofs can be somewhat simplified by 
using more colors; in the first reading one may wish to use a new set of colors in sections 5 and 6 . 


3 Random Graph Lemmas 

We describe the structures needed for the reductions and prove that they exist on a polynomial fraction of 
graphs. Such questions, when restricted to properties of almost all graphs, are addressed in the theory of 
random graphs (see [Bollobas 85]). 

A transitive tournament is an acyclic (except for self-loops at each node) complete digraph. Here we 
simply refer to them as tournaments. E M (Y) stands for the expected value of the random variable Y w.r.t the 
distribution /i. Unless stated otherwise, our random graphs have edges drawn independently with probability 
1/2. In this section we consider distributions on graphs with a given (not chosen at random) number of nodes. 
Let the graph G be chosen at random w.r.t. some distribution p. A property P of graphs G=(V (G), E{G)) 
on n= |G| nodes is satisfied almost everywhere or for /x-almost every (a.e.) graph if its /z-probability is 
1 —o(l). We omit p when the distribution is understood. When two functions of integers / and g satisfy 
f{n ) = (1 + o(l))g(n) we write / ~ g. 


Remark 2 We use the following facts on probability and approximations: 

1. (a) n\ = (f)" • y/2nn + 9 ni 6 n £ [1, tt/3] 

(b) For k = o( v / n), (£) ~ 

(c) Let k = o(^/n) integers be chosen from {l,...,n} randomly and independently. The probability 

that all are distinct is nf =1 (l — i) = e -0 ^" = 1 —o(l) 

2. Assume that the random variable Y = i with probability pi, i £ {1,..., s}. 

Let yi be the number of occurrences of i in n independent Bernoulli trials ofY. 

Then, from Remark 1(a) and the central limit theorem: 

(a) np i = E(y i ); of = Variance ^) = npi( 1 - pf) 

(b) If x 3 = then \yt — npi\ > <JiX with probability e -3 ^/ 2 /0(x + 1) 

(c) Prob [yt = i = 1,... ,s]= y 7 n/O (vTIi ( 7r / 3 + 27rfc !; )), 

for integers h such that JA h = n, Jf,, = 0 ( 1 ), for 7 = 1 , 2 ,3. 


Proof of item 2c: 

The number of ways in which the event [yi = ki , * := 1,..., s] can occur is n!/ rii<s(^i-) an d each of these 
has probability n'iLi Pi' ■ Thus the required probability is 


n! n 



TT (' I 27m + 9 n 

fjf v k i) V n; ( 27 r ^i +) 


Let <5, = %- Pi . Then,rUlT: (ff) ‘ =e" n( £> +4i):log(1+ ^ )) . 

min{t,t ~ t 2 /2 + 1 3 /3} for t > - 1 , {ki ~(np-)r + = 0 ( 1 ), for 7 = 


Now the result follows using log(l + 1) < 
1,2,3 and 6 t = O.H 
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Lemma 1 Let m = 2 k and X k be the number of k-node tournaments in a random digraph of n= [_2 fc-c J = 
fi(fc 3 ) nodes. Then E(X^) ~ m~ c ; E(Afj() ~ m~° + m~ 2c . 

Proof: We use standard second moment methods here. First, note that X 2 = Yi N[ where JV) is the 
number of ordered pairs of fc-node tournaments sharing k — l nodes. By linearity of expectation, E(X|) = 
]F ; E(iVj). There are (*) ways to choose the positions of shared nodes in each tournament in a pair and 
(fc+/)(^ + 0! ways to map this structure in our graph. The probability of each pair to form the tournaments 
is 2~( k2 ~ l2+2kl \ Using Remark 1(b) and substituting n ~ 2 k ~ c below, 

2“°( fc +02 i d- fc ) 


E (JV,) = 2 


l 2 — k 2 —2kl 


n\/(n—k—l)\ 


Putting to = 2 k , one gets E(Af fe ) = E(AT 0 ) ~ to c , and E(fV fe ) ~ to 2c . Now, E(Xj?) = ]T)f=o E (-^) ~ 

m~ c + m~ 2c + Ef=ri lE (Nz). It remains to show that Yi=i e {Ni) = o(m~ c + m~ 2c ). But 2~ c< < k+l '> is 
< m~ c 2~ c if c > 0, and is < mT 2c 2 c if c < 0. Now, the result follows from 



< 


2 —l((k—l)—2 log k ) 
2 — (k—l)(l—2 log k ) 


for 0 < l < k/2 
for k/2 < l < k 


= o(2- fe/3 ) 


o(to 1 / 3 ). 


Let l/o(fc) < c < o(k) be positive and A c be the probability distribution of a L2 fe-c J-node graph G 
generated as follows: First we choose randomly a sequence of k nodes of G and force a tournament T on 
them. Then, we choose at random the set of all other edges ( i,j) (jL V{T) 2 . The following corollary implies 
that a random graph on L2 fe-c J nodes has a unique largest fc-node tournament with a polynomial probability 
if and only if c = 0(1). 


Corollary 1 1. For those G with unique k-node tournaments, A C ({G})/A({G}) ~ m c . 

2. \ c -almost every G has only one tournament of size > k. 


Proof: First note that, under A c distribution, all pairs (T, G) have the same (or 0) probability. Thus, 
A C ({G})/A({G}) = XkfE\(Xk ), which is ~ m c , if X/- = l. Then, the expected number of tournaments 


E Ac (X fe ) =E a 



X k \ 
V x (X k )J 


E a (X|) _ to 0 + to 2c 
E A (X fe ) m~ c 


In other words, the expected number of tournaments other than the forced one is m~ c ~ 0. Using Markov’s 
inequality, Prob[Z > 1] < E (Z) we get the result.® 

We now prove a lemma which we use to show that a.e. G contains any bounded (i.e. 0(1)) degree 
graph (e.g. Hamilton path, grids) as a spanning subgraph. We first prove a claim on matchings in random 
undirected bipartite graphs. Our bipartite graphs have vertex classes Vi and V 2 , Ui| = | V 2 1 = n and edges 
chosen with probability b/n. If G has no complete matching then there exists a set A C V),i € {1,2} such 
that \A\ = a and the set F(H) of its neighbors has size a — 1. No edges go from A to V 2 — r(H). Moreover 
if A is minimal, a < (n + l)/2 and at least 2a — 2 edges go from A to F(H). Our proof follows the method 
in [Bollobas 85, p.158-159], where the existence of matchings is established with probability 1 — o(l). Here, 
however, we need to quantify this measure more precisely. 


Lemma 2 Let G be an undirected bipartite graph generated by choosing its edges randomly and independently 
with probability b/n. Then the probability that G has no perfect matching is 0(n)/e b . 
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Using (l) < ( ne/k ) k , 


we get from the remark above that the expected number of such sets A is 


< 


< 


< 


< 


2 E 

a<(n+ 1)/2 


n\ n \ I a 


i(a — 1) 


a) \a — 1/ \ 2a — 2 

a —1 


P za ~\i-P) 


a(n— a+1) 


^-/ne\ a / roe \ a 1 / a(a - l)e\ 2a 2 ( b\ 2a 2 , a (n-a+i) 


*E 


e 4a_3 n 2a 




2a—2 


0 —ba(n—a-\-l)/n 


(a - l)° _1 2 2a_2 


8 n 
e 2 b 2 


(n+l)/2 


E (l/«) • (■rW.r'V-^)) 


a=l 


The ratio of (a + l)-th term over the a-th term in the sum is 1 e 4 b 2 e 6( 4 «■ ) and this is < 1 if 

9 3 

b > 20. Thus the term in the summation reaches the maximum for a = 1 when its value is < All the 

terms corresponding to a > 2 form a falling geometric sequence, and hence their sum is within a constant 
factor of the first term. From this the lemma follows. ■ 

Now we state a result first conjectured by P. Erdos and proven by Hajnal and Szemeredi. See [Bollobas 
82] for a proof. We know of no polynomial time algorithm yet. 


Lemma 3 (Partitioning Lemma) Any graph of maximal degree < d can be partitioned into d independent 
sets whose sizes differ at most by one. 


Next we use this lemma to find embeddings of some structures we need in random graphs. We first 
describe these embeddings. Write H C G if H is an induced subgraph of G and for a function of n 
that asymptotically goes to infinity. When one, both, or none of the edges (u,v), (v,u) exist we refer to the 
nodes u,v as connected by a single or double edge, or non-adjacent respectively. A graph di-embedding is 
a one-to-one map g : V(G) —> V(H) which is an isomorphism on each connected 2-node subgraphs of G. 
Note that nodes that are disconnected in G can be mapped into connected nodes in H. We say a graph F 
is compatible with a graph G if it has the same number of looped and un-looped nodes as G. For a directed 
graph G, we define the degree deg(u) of a node u is the total number of incident edges, whether incoming 
(i.e., directed into u), outgoing (i.e., directed out of zt), or double (i.e., both incoming and outgoing edges 
with the end points), and deg{G) is the maximum degree of the nodes. 

Lemma 4 (Embedding Lemma) Let H C F, d := deg(F), m :=\F — H\ > 2d 3 4 d + u> n . Consider random 
directed graphs G with H C G that are compatible with F. For a.e. such graphs, there exists a di-embedding 
g of F into G where g is an identity on H. 


Proof: 

Initialization: We reduce the task of constructing g to that of finding perfect matchings in a sequence 
of random bi-partite graphs. Using the lemma |^, we partition F — H into independent sets Ij,j < d 2 + 1, 
where each Ij consists of either only looped nodes or only un-looped nodes with to' := [m/d 2 \ < \Ij\. This 
is feasible since the graphs are compatible. We extend F to a graph F' of degree < d 2 by adding edges 
between nodes in F — H that share a neighbor in H. Now, F' can be partitioned into independent sets as 
required. Next, split V(G — H) into disjoint Vj, |U, | = \Ij\. Repeat the following step for j := 1, 2,..., until 
the extension of g is completed. 

Extension Step(j): Let H' be set of nodes on which g is defined (i.e. di-embedding is found). Call v £ Vj 
a candidate for u £ Ij if setting g(u) :=v extends g as a di-embedding over H' U {u}. For this, v must satisfy 
at most 2d many connectivity constraints. Now we construct a bipartite graph G' by connecting every node 
in Ij to all of its candidates in Vj. We find a perfect matching in this graph; this finds for every node in Ij 
a node in Vj satisfying the connectivity requirements, extending g over H' U Ij. 
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Analysis: In G' the probability of an edge {u,z;} is 4- rfe s(“). Also the edges are chosen independently: 
the conditional probability of v being a candidate for u is the same, given the set of all the edges from v to 
r (Ij — {u}) n H', since T(Ij — {zt}) and T({zz}) have no nodes in common in G' U H’. 

The property we need is monotone i.e. it remains true if we add edges between two previously non- 
adjacent nodes. So, we may assume the edges in G' to be of the same probability A~ d . Put b/rn! = 4 -d . 
Then, using lemma |], the probability that one of the d 2 matching steps fails is 

< d 2 0(m/d 2 ).e~ b = 0(rn)/e m ' A ~ d < 0{2d 3 A d + io n A~ d )/e 2d+ "^- = o(l). 


4 The Reduction Algorithm R 


Our proof uses from the completeness of the Random Tiling Problem (RTP) which we describe below. 
[Impagliazzo Levin 90] reduces any inversion problem to a problem under polynomial time computable 
distribution. (A distribution on non-negative integers is polynomial time computable if on input x the 
measure of the interval [0, cc] can be computed in time polynomial in |x|. [Levin 86] proved RTP complete 
for problems under polynomial time computable distributions using deterministic reductions. 

A tile is a square with the corners marked with Latin letters both upper case and lower case letters. In the 
tiling S of an n by n square, letters on the touching corners of adjacent tiles match. T(S) returns (n,I, s), 
where X is the set of those tiles (called legal ) appearing in S and s is the “starting” string of 2(n — 2L logn J) 
tiles appearing at the left in the bottom row of S. 

Problem: Invert T, i.e. extend a string of tiles into a square. 

Distribution: Uniform: choose n randomly with probability n (n+i) an< ^ the set of tiles randomly among 

all possible 2 52 and choose each successive tile of the “bottom row” string with equal probability from the 
legal tiles matching the previously chosen. 

To keep the number of colors i n T heorem 1 small, we actually reduce to GCP a special (but still complete) 
case of RTP described in section 7.1. 


4.1 The description of R 

The reduction produces G, G from an RTP instance. We show that any such coloring of G satisfying G 
easily yields a solution of the underlying RTP instance. 

Recall that X = (p,X, s) is the RTP instance, and by supplementing it with u> of p 7 random bits, we get a 
randomization of Y = X, to which is the input to the reduction R. Our reduction will sample a set of graphs 
whose probability is approximately 1/p 7 and so to make its output almost uniform it does the following. 
R(lo,X) aborts and outputs nil if w starts with < [log|az|] zeros. Otherwise, it uses the remaining random 
bits of <jj to construct a graph G as below and supplements it with a standard coloration C described in the 
following sections. 

Remark 3 We here alert the reader about a strategy used in our presentation. Recall from introduction 
that the conditions for the usual edge coloring problem can be specified by the set of permissible colored 
spots. Similarly, we can list the spots needed to enforce our coloring restrictions, but it is more convenient 
to describe how to color the graph, and infer the set of permissible spots from its descriptions. We need also 
to show that our coloration specification forces the adversary to color the graph as described and this is a 
main part of our proof. In addition, we need to show how the adversary is forced to solve a tiling problem 
instance our choice to successfully accomplish such a graph coloring. So, we first describe how to transform 
a given solution to a tiling instance into a colored digraph G (in section ^]) of special form. Then we embed 
this G into a random graph G. We describe the coloring details incrementally in the entire paper. The 
checking of consistency and the feasibility of these specifications is straightforward and somewhat tedious 





but the enclosed figures may be helpful and can be viewed in color on the web. The reader may initially 
simplify some of this task by increasing the number of colors used by one or two. 


First, R partitions {1,..., 2 n + k — 1} at random into disjoint sets T, Ut, Lt, Go, Li, Ui, such that k = 
[log 1 5 4 p 2 ],n = |_2 fe_c J, c = 10 + 1/6, U = U\ U Uq U Ut, L = L\ U Lt, such that, 

\U\ = \L\ + 1 =n, \T\ = k (1) 

\U 0 \ = \U T \ = \L T \ + l = 2p 2 (2) 

Then R randomly orders T as t\, t%,..., t/. and by randomly adding edges extends it into a graph of 2n + k — 1 
nodes which is random except that [P1]-[P4] are enforced: 


PI the sequence of nodes ... ,fi forms a tournament 

P2 T U L is the set of all nodes with self-loops and U is the set of all un-looped nodes 

P3 Ut U Lt is the set of all nodes connected to every node in T 

P4 Uq is the set of all un-looped nodes with no uni-directional edge into T. 


Following [Babai, Erdos, Selkow 80], we define the code of a node u as the binary string of length 2|Tj, 
whose i-th bit reflects the presence of the code edge (u, tj/ 2 ) or (t(j +1 )/ 2 , u). The reduction arranges the 
nodes in Ut (called input nodes hereafter) in the decreasing order of codes as Vi, V 2 , ■ ■ ■, v\u T \ and connects 
ti and Vi with an edge (ti,v\). Then R adds or deletes the edges between .s successive input nodes 'ty, ty + i 
to encode the initial string s of X. The four possibilities for connectivities between ty, iy_|_j encode the 
symbols from {0,1, *,A}, which are the only symbols that appear in bottom row of the Tiling patterns of 
the particular RTP we work with (see section [?]). The resultant graph is G. 

Let Xk(H) be the number of fc-node tournaments in H. Denote by A f p (or Af when there is no confusion) 
the set of graphs satisfying Xk = 1, and having the numbers |J7| of un-looped, \L\ of looped nodes, \Lt\, \Ut\, 

| i/o | as specified in (!]-[/). 


Remark 4 Hereafter, unless stated otherwise, we use a.e. to refer to the probability over the non- nil outputs 
of R. Note that a.e. non- nil graph generated by R is in Af and is uniformly distributed on it. Thus, we 
will consider the uniform distribution on Af and denote it by Prob p [.} (or Prob[.] when p is clear). Sy (see 
section 2A) is defined to contain exactly those lo in Y resulting in graphs which satisfy all properties of a.e. 
G € Af required below. Thus, the a.e. graph properties stated below will be assumed to be satisfied by G. Sy 
has a measure o/l/0(|w|), since u must start with > |~log(|u;|)~| zeros. 


Proposition 1 i?(A)({G}) = 0(A(G)), i.e. the distribution of graphs G output by R is at most that of the 
uniform distribution. 

Proof: ui starts with the required number of zeros with probability l/0(|w|)). Thus we need to show that 
any graph H will be generated by R with probability < |w| ■ A({ff}). 

Altering edges between successive nodes in Ut to encode random s according to the conventions preserves 
the distribution. Thus we need only show that other constraints enforced by the reduction are satisfied by 
a noticeable fraction of graphs. 

By Corollary |l| A c -a.e. H has Xk(H) = 1 and all such H have equal probability ~ 2 kc X({H}) = 
A({iL}) • 0(n c ). Given that a graph has a unique tournament, all the other quantities (|l||2) are WC U defined. 
Since R generates graphs with the distribution A c modified by imposing H £ Af, its output distribution is a 
modification of A c by a factor of \/\ c (Af/Xk = l). So, it suffices to show that Prob(A/’/Xfc = 1) = n c /0 (\uj\). 

But the set sizes required by (|ljj|) differ by 0(1) from their expected values and hence by item 2(c) of 
Remark |]are satisfied jointly with probability l/O^n 1 / 2 ). 
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Proposition 2 The reduction R succeeds with probability one: for a.e. u> starting with [log(|<x>|)] zeroes, X 
has a tiling if and only if G = R(ui,X) is colorable. Moreover, the tiling can be constructed in polynomial 
time (by Q) from a coloring. 

The theorem follows from these two propositions. The rest of this paper is devoted to proving Proposition 
|j. Q reads off the Tiling from a coloring of G in a straightforward way. 

In the next section, we describe the inverse transformation Q . how to color the graph given a solution 
of tiling. The coloration of this graph will be the one specified by R. But what we need is item (3) of the 
definition of reduction: that a witness of coloring problem can be transformed into a witness of tiling by Q. 
Fortunately, the coloration specified by R forces the graph G (which will be proved in section || where both 
the coloration and some random graph properties play a role) be colored as specified by the transformation 

Q- 1 . 

5 Outline of the Construction 

Proceeding as outlined in Remark |j, we now map a given finite tiled square, into a coloring of G in two 
stages. First, we transform the tiling into a colored graph G' , which serves as a template. Then we embed 
G' into G, transfer the colors from G' and then color some extra links in G. Any coloring of G will be 
guaranteed to either contain these structures or violate the coloration conditions. 

The mapping of a tiled square, say located in the integer plane with left bottom corner at the origin, into 
G' is easy to visualize and the geometric meanings associated with coloring of edges are used heavily. So we 
describe it in a leisurely pace. Each of our tile will be a 2 by 2 square. 

We need to first define some graphs with a grid structure. By a grid (respectively toroidal grid ) we mean 
a graph obtained by adding at most one of the diagonals to each of the smallest squares in the product graph 
of two directed paths (respectively cycles). If the paths have equal length, we call it a square grid. Let AC 2 n 
be a cycle of even length with nodes with alternating looped and un-looped nodes. 

Our G' will contain a toroidal grid AC 2 n x AC 2 n as a subgraph: it has a looped node corresponding each 
tile corner, each of which is connected to a node corresponding to a neighboring tile corner by edges and 
is colored to encode horizontal,vertical or other directions as well as some information about the letters on 
the tiles. These looped nodes have both co-ordinates even and make up a grid we call secondary grid. The 
un-looped nodes will be located so that at least one co-ordinate is odd and we call the finer grid AC 2 n x AC- 2 n 
as primary grid. We use symbolic names to identify such information and call them links (defined in section 
|2.3| and described below) denote them in bold face. 

Embedding lemma guarantees that the above structures will exist in a.e. random graph G, but to force 
the adversary to color out a subgraph as G', we will need G' to have more gadgets. To this end, G' will 
contain tournament T' which we will map to some T in G. To orient the graph G uniquely relative to T, we 
will define a label for each node and seek to arrange a uniquely defined subset of those in a monotone order 
using the labels (or codes) and connect them in a chain (called input chain later). Furthermore, as we shall 
see, we will seek the adversary to exhibit a proof of this ordering via specifications of coloration. We shall 
use the names of the structures in G' (e.g. primary grid, input chain described below) later while referring 
to their counterparts in G. 

The code of u with respect to ( w.r.t .) U £ T is the restriction of its code (defined in section 
digits 2 i and 2i + 1. 

We denote the induced subgraph of two nodes as [u, f], As indicated above,we divide the links into many 
classes and assign each a symbolic name that reflect directions in a grid or information Turing Machine state 
transitions encoded on the coloring of the grid edges. Some of the links are named by the function they are 

associated with. For example, we write u v and this is read as “ the node u is connected to the node v 
by an h-link”. By a red edge we mean an edge colored red and by a red node one with a red loop (similarly 
for other colors). Some of the links we will define and frequently refer are: h, H (for horizontal), v, V, (for 
vertical), di,d 2 ,d 3 , (for diagonal), I (for input chain), M (for Turing Machine), C (for Codeblanks) and 


4.1) to the 
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its two subclasses B (for bottom) and L (for the left vertical border), K (for key), D (for double blank), 
Left,Right and Li , Ri, Zi, i< 4. 

Some of the links (e.g., directional ones such as h) induce a permutation on a subset of nodes, when at 
each node there is exactly one outgoing and one incoming links of that class. We then write, for example, 
v = h(it) and u = h -1 (u) accordingly. We would use only those links that are directed (i.e. asymmetric), 
except for the default links in which the edges between the two nodes are grey or absent. 

We associate a type name with each non-loop blank which is simply the type (i.e. class) of the link 
it is in. For example, a blank edge in a h as h-blank edge, and a one occurring in a M-link encoding a 
turing machine state by M-blank. If (u,v) / E(G), it is sometimes convenient to refer to it as being colored 
“absent”. A down-edge from a node u is a single edge from u into a blank node and an up-edge goes in the 
reverse direction. 


Remark 5 1. It is essential to our construction that any non-blank node has at most one incoming 

and/or outgoing link of each type, except C and default. 

2. Those edges not specifically used in the construction are colored gray. It will turn out that the number 
of blank edges cannot be increased without creating new types of colored triangles. This is important 
for enforcing our coloring specifications. The essential part of the colored graph will be restricted to the 
nodes in T U Lt U Ut U Uq. Other nodes have all incident edges colored the default color grey, except 
for the double edges between U\ and T which are colored blank-grey. 


5.1 The grids and the Input chain on G' 


We now encode the solution for tiling on to G' by coloring its edges appropriately. Our G' contains a unique 
tournament T' and the sets U' T , L ' T , Uo' with the same sizes as their counterparts (seej^-^j) in G. We denote 
the nodes in L' T , U’ T , and V(T') by z\, v[ and t\, i> 1 respectively. We color a self-loop blank if and only it 


is in T'. The sink node z' 0 '=' t\ of the tournament is distinguished by its extremal position with respect to 
the Hamilton path of T', i.e. has no outgoing single edges to a blank node. 

Next, we build a 2 p by 2 p toroidal grid (called the primary grid) by defining two commutative permuta¬ 
tions h, v of period 2 p on L' T U {t^} U U/. We also create an input chain z' 0 , v[, z[, v' 2 , z 2 ,..., z{ ur | _ 1 ,v'^ J , |, 
z[ / z'j for i / j and connect successive nodes by a I-link. We connect z[ to constant many nodes in T' 
(described in sections 3.1 and |7.2|). 

The links I, v, and h alternate between looped and an un-looped nodes. (See figure 3). The smallest 
squares on the grid are equipped with diagonal links di = hv and d 2 = h _1 v between un-looped nodes and 
d 3 = hv links between some of the looped nodes. Consider this grid to be in x—y plane with a blank looped 
node at origin and such that a node at (x, y) is looped iff x + y is even. We say a node belongs to the even 
grid if both x and y are even. Only looped nodes belong to the even grid. We use top, bottom, left, right, 
left border etc. in a natural way with respect to the grid. 


We create H links on the even grid using the following rule: u —> w whenever u —> v —> w and u is 
a looped node. Similarly v-links yield V-links. All pairs u,v of un-looped nodes with v = H(zt) := h 2 (u) or 
v = V(u) := v 2 (u) will be connected by a single red or green edge respectively. Successive looped nodes z[ 
on the input chain will be connected by the grid links H or d 3 . The input chain starts at the origin, passes 
through all p looped nodes in the bottom row, climbs to successive rows via d 3 -diagonals in the rightmost 
column and then eventually passes through all the nodes in L' T and U' T . We disallow H, V links be incident 
at any blank node except t \: so it will be the only blank node on the input chain and on the grid (i.e. at 
the origin). 

The coloring of the even grid will represent the Tiling. We sometimes directly refer to the corresponding 
Universal Turing Machine (UTM) computation encoded by the tiling pattern. Recall that G itself encodes 
the starting string of RTP as connectivities between successive input nodes. So, we add the corresponding 
edges between successive un-looped nodes v[ and v' i+1 on the chain v[,v 2 ,..., u| g |. 
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From the tiling pattern, we infer the movement or the trajectory of the head of the UTM in the corre¬ 
sponding space-time history. Now we paint “transfer” links Li , Ri, Zi which encode only this movement (see 
section 7.2 for details) on the grid. Next, we color the outgoing H,V, or C-links at each looped node in the 
even grid to encode a letter shared by four adjacent tiles. We postpone the description of some less regular 
edges. 


Coloring the links: We will choose and exhibit the permutations (and thus the grid pattern) by marking 
out the corresponding grid edges. These are distinguished by coloring the forward edge blank and the parallel 
edges with grey (for h), blank (for outgoing v-links at a node in Uq ), red (for di), green (for outgoing v at 
z'); the parallel edge for d 2 will be absent. The forward edges in I are blank and the reverse edges may be 
green, red, or absent. At t\ , the outgoing Ii-link is a single blank. 


Embedding into random graphs: The key fact is that all nodes in G' except those of T' will have 
bounded degree. In section 7.4, we prove the existence of a di-embedding g x of G' into in a.e. G such that 
g x { v i ) = Vi, g x (t' i ) = ti , g x (L' T ) = Lt and g x {Uo) = Uq. This means that the tournament T' is mapped 
into T, the input chain in G' is mapped into a chain zq, v\, Z\, V 2 , Z 2 , ■ ■ ■, z\u T \_i, v\jj t \, Zi £ Lt and the vfs 
are ordered according to their codes. 


Proposition 3 In a.e. G all nodes in Ut have distinct codes, 
truncated to trailing 0.9 k digits. 


Moreover, they remain distinct even when 


Proof: The codes of nodes in Ut are independent and uniformly distributed for graphs in A f. There are 
3 fc possible code words for U T , and \U T \ ~ (f) fc 2 fc " c < (§) fe = = 0 (3 om ) = o(V¥). Item 1(c) of 

remark yields the result. The proof of moreover part is similar. ■ 

So, in a.e. G, a monotone ordering of the codes of the input nodes as v\, V 2 ■ ■ ■ would result in a unique 
sequence. We exhibit such a decreasing order as follows. For each i, we choose l(i) and exhibit it by coloring a 
K-link from to . The coloring of the edges between input nodes and the tournament nodes will indicate 
(see section 6T for details) that the code of Vi + 1 w.r.t. tj is at most that of Vi for j > l(i), and strictly less 
for j = l(i). To each V{ we assign a distinct intermediate node Zi £ Lt which is connected to Vi, Vi + \ and 
satisfies some constant number of connectivity conditions described in (A) of section Intuitively, there a 
huge number of ways of picking these intermediate nodes in a random graph, and one can almost surely find 
them using the embedding lemma. 


6 Forcing the Blank Skeleton 

In this section we show how a selection of spots containing blank edges can enforce a toroidal grid of size 
2 p by 2 p, the tournament and the input chain. We argue that if the adversary who colors a random graph 
uses a tournament of size even one less than k. he would lose 6{n) blank edges (between U and T) which 
cannot be compensated by coloring edges of other types which all together are fewer in order of magnitude. 
Since it is the only k-node tournament, the adversary ends up using T. The main idea is to pose suitable 
condition on spots and use the following: there are eight types of blank edges and each can occur at most 
bi,i < 8 times in a.e. random graph. We require the total number of blank edges to be ]T) t>j, which forces 
the adversary to use each type exactly bi times. This strategy crucially depends on the fact that the graph 
is random. 

Let T be the set of nodes in G colored blank. Let U~, L~ respectively be the sets of nodes in U and L~ 
connected to every node in T. Let U~ be the set of un-looped nodes with no down edges to T. 

Any link with a blank non-loop edge (i.e., an edge that is not a self-loop) falls into one of the following 
disjoint directed types: h, v, di, d 2 ,1, K, C, and M. The following constraints [A] — [D] on these types can 
be checked by inspecting the spots in the colored graph. 
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A The coloration of T is that of a fc-node tournament with all loops blank and the other edges green. 

This coloration forces T to actually form a tournament with blank self-loops and all other edges green. 
Let t\ be the sink node. 

B Any non-blank node has at most one link of each of the types: K, M, incoming and outgoing h, d 1; d 2 , 
v, I. I-links run only within U~ U L~ U T and h, v, d x or d 2 -links only within U~ U L~ U {G}. 


By definition, T has no incoming I-links and I, v, 

and h-links alternate between a looped and an un-looped node while d!,d 2 links are between like nodes. 
C Any K-link is between U~ and T. 

C ~ 

It is either a blank down edge or a double edge with both edges blank, u —> u, if it € U, v € T, both edges 
are present, and exactly one of them is blank. In the case of the double-blank edge from an un-looped node 
u to T, both K-link and the C-links are combined into one link and u must be in U~. 

D M-links run between nodes in L~ U T. 

Here at least one of the two nodes is non-blank. We also allow M-links between two green or gray nodes in 
L~. 

E Put b 0 = k, bi = 4 p 2 , 6 2 = 8 p 2 , 63 , 64 , 65 = 2 p 2 , be = Ap 2 — 1, 67 = 2p 2 — 1, 6 g = the number of double edges 
between U and T, and b= 6 ,;. Let bo be the number of blank edges on T and b\, 6 2 , • • •, 6 g be the 
number of edges of the types h, v, di, d 2 , K, I, M, and C respectively. Let b = JA h be the number of 
all blank edges. Then, bi = bi (so, 6 = 6 ). 


Proposition 4 Any coloring, observing A — D and b > b, of a.e. G £ Af has bi < bi and T = T. 

Proof: From A —D, the maximum number of blank edges of type other than C is eight for each node. 
Let |T| = k' = k — a. Then, in a.e. G, 

1. A > 0, since by Corollary |l| k' < k 

2. for any set B of k' looped nodes the number of un-looped nodes which are connected to every node in 
B is < 2(3/4) fc 'n. 

3. the number of double edges between any set of A nodes and U is in the range An/4 ± n 2 / 3 

(2) and (3) follow from item 2(b) of Remark 2 and the fact that the expected number of k 1 size sets 
violating this condition is < (J!,)e~ nS = n °( log 2 n) e -n 5 _ n -i/o(i), <5 > q. Similarly, \U^\ and \L~\ are 
< 2 (§) fc 'n. 

By (3), any coloring of a.e. G has to decrease (in comparison to 6) the number of C-edges by at least 
An/4 — n 2 / 3 > To color > 6 blank edges, one has to compensate by painting extra blank edges of other 
types, whose total number < 6 - 8 (|) fc, ?z. This is possible only if 48(|) fe, n > i.e. (|) A > (|) fc • ^fg, whence 
A >k for large enough k - a contradiction. So, |T| = k, and by uniciueness of the largest tournament T = T 
and thus U~ = Uq, U~ = Ut , and L~ = Lt- The number of blank edges of the type h, v, di, d 2 is at most 
8\Uq\ = 16 p 2 . (Note that v-links have double blank edges). I-links contribute < 2\Ut \ — 1 = 4 p 2 — 1 blanks. 
The maximum number of blank edges of the types M and K are at most \Lt\ = 2 p 2 — A and \Ut\ = 2 p 2 
respectively. Finally, the maximum number of blank edges possible on T is k. ■ 
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6.1 Monotone Ordering of the Input Chain 

I-edges are restricted to Ut U Lt U {ti} and be of them can fit only by spanning this set. The existence 
of 65 K-edges implies that every u, € Ut has a K-link to tj , l(i) d =j. The conditions described in the next 
paragraph imply that the code of is greater than the code of ry + i. Thus, the input nodes are arranged in 
the decreasing order of their codes along the input chain of I-links, which must form a simple path (without 
any cycles). 

All edges from T to Vi and up edges from v t are to be colored red, blank or grey depending on j > l(i), 
j = l(i) or j > l(i). The code of vy w.r.t. tj was defined as 01,10 and 11 respectively depending on whether 
Vi has a down, up and double edge to tj. For j > l(i), this ternary code is to be exhibited on the edges 
between z t and tj by coloring them red, green or grey respectively. For j = l(i), 10 or 01 is to be encoded 
on the edges between Z\ and tj if v z has a code 11 w.r.t. tj , and otherwise 01 must be encoded. For all i,j , 
in the triangle Zi,Vi+i,tj the code of Wj+i must be less or equal to the digit encoded on Zj s edge to tj. For 
j < l(i), the edge(s) between z z and tj encode an 11, by either being grey or forming a M-link. 


6.2 Forcing the toroidal grid 

We first describe some more conditions related to input chain and the bottom row. 


F Successive looped nodes z z , z z +1 on the input chain are connected by an H(= h 2 ), H 1 or a ch = hv link. 


We require dah 


whenever cLh is defined. 


G 


B 


H 


B H 


t\ v or v —> t\ whenever t\ —> u —> v or t\ —> u —> v. Similarly, we enforce t\ — * u or u —> t\ 
if u = v 2 -' ±1 (ti). Only t\ has both B and L links incident. (So t\ will be connected to all the un-looped 
nodes in the bottom of the grid via B (for bottom) edges and to the nodes in the left border via L (for 
Left Border) edges) 


The subclasses L and B of C-links are distinguished by coloring the non-blank edge red into t\ and green 
respectively. Triangles with h, v links together with the diagonals di or do exhibit the commutativity of h 
and v. Commutativity implies that any node u connected to t\ via h, v links is of the form u = h*v J (ii). 
From [G], we have that h*v J (fi) = t\ implies h*(fi) = v J (ti) = t\. Put V =Lt U Uq U {fi}. 

Claim: h, v, di, d2 links induce a connected toroidal grid on V. 

Proof: I-links pass through all nodes in Lt- Thus [F] implies that any node in u £ Lt is accessible as 
u = h*v J (fi). So is every u € Uo = h(L t)- The 1-1 correspondence lTv J (fi) —> (i,j), yields the co-ordinates 
for nodes in a rectangular grid. 

IT(ti) = v J (fi) = t\ for some i, j, since h, v permute the finite set V. Then ij = Ap 2 and both i,j are 
even, as h and v alternate between looped and un-looped nodes. But i,j > 2, otherwise both h, h 1 (or 
respectively v,v _1 ) links between some two nodes must exist using separate blank edges; to do this without 
reducing the number of blank edges requires four edges between two nodes since h and v links require a 
double edge each. So i=j = 2p and the grid is toroidal. ■ 


Marking the bottom row We partition I-links into two types I 2 (single blank), Ii. Zi is not in the bottom 
row if and only if it has an incoming I 2 link. We next define the position link of h (zt) £ Uq connecting it to 
iy + i that would reflect the information if z z if it is in the bottom row or not. 

We now force Ii-links to start at t\ and pass through all the looped nodes in the bottom row: First, 
we ensure an outgoing Ii-link at t\ = Zq by disallowing any outgoing 12 -link; also we disallow a transition 

H II 

from I 2 to Ii along the input chain and require that z z —> z z +\ if z z — Vi+1 — 1 * Zi+i- In the triangle 
Zi, h(zi), iy+i the type of the outgoing I-link at z z is to be copied on the position link of h(^); and if this 

g 

is I 2 , we forbid t\ —> h (zt). This guarantees that the bottom row looped nodes have no 12 -links incident. 
The position link of v = h _ 1 (ti) must encode I2 and the outgoing I-link at Ih _ 1 (u) must be I2. 
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The position links are double edges colored red-grey to encode I 2 ; they are colored red-green or grey-green 
to encode Ii. 

Remark 6 Using no knowledge of the witness, section || specified the colors of all edges except some of 
those on the even grid and between even grid and T. These will be described in the next section. Note that 
the conditions on spots for primary grid, input chain, code edges, and tournament do not affect the even 
grid links. 

7 Coloring the Tiled Square 

7.1 Restrictions on RTP 

We give a reduction to GCP from a restricted version of RTP (called RRTP). RRTP is restricted in the sense 
that the tiled square has a prime size; moreover, it is derived from a TM halting problem version in which 
the machine tape has some special formatting criteria and the head is in the same position in the top and 
bottom rows of tiles. These restrictions enable us simplify and economize our constructions below. First we 
describe RRTP and show its completeness by reducing the bounded halting problem of a Universal Turing 
Machine (UTM) under random inputs. 

Given a UTM with a quadratic time bound u, a random binary string x, the halting problem is to decide 
if there is a y so that u(x,y) converges. We describe a UTM next. It is crucial that the UTM simulation 
preserves polynomial time since our reductions are polynomial time machines. Many small UTM’s were 
found in [Shannon 56], [Ikeno 58], [Minsky 67] [Watanabe 61] [Priese 79], and other works. But the smaller 
ones have an exponential slow down in simulation. The machines of Ikeno and Watanabe work in a similar 
way and incur a slow down factor proportional to the space used. 

All our TM’s Mi, M 2 ,... are deterministic and have one tape. In one transition of Mi the head changes 
the state, writes a new symbol on the tape and moves left or right. We use the UTM W from [Watanabe 
61] which has tape characters {0,1, *, O', 1'}, states {A — H} and simulates a deterministic turing machine 
Adi with at most quadratic slow down. The tape alphabet for M,’s is {0,1} with no blank symbol. Let M 
be the simulated machine with the states {1,..., q} where q is the halting state. We assume M’s head never 
attempts to fall off the tape’s left end. Throughout the simulation, the tape of W stores Ip o I a o ui. Here, 
the strings I a ,Ip retain initial lengths throughout the simulation and encode the transition table and the 
current state of M; w is the tape of M. Both I a and Ip consist of segments representing the states 1,..., q—1 
ordered from right to left. Initially, I a ,Ip are over {0,1, *} and the head of W looks at exactly the same 
cell of oj as M. When M halts by entering the state q , W attempts to read the (missing) segment for q in 
the Ip region, tries to move out of the tape and traps to a halt. W marks the current position of the head 
of M, moves in between this and the encoding I a ,Ip of M, and simulates the transitions of M stepwise. W 
simulates one step of M in 4r + d steps, where d depends on the state, symbol being read, and the encoding 
of M, but not on the distance r of M’s head from the end of the program segment Ip o I a . 

Since the tape alphabet has no “blank” symbol, we use a self-delimiting prefix code x to delimit inputs 
x. To obtain x, repeat each digit of its length |x| (in binary) twice and change the last bit, then append x. 
Let Xi,i > 1 denote the *-th bit of x and A(y) be an algorithm checking some “instance-witness” relation 
Ra = {(00x, w)} in |rr| 3 steps, where even digits of x and w are paddings and they are encoded as follows:, 
|5| = v, y = xo o 0 o xi o 0 o ... o x v o 0 o x' 0 o wo ° x[ o w\ o ... o x 2m o w^m- Ma encodes the symbols 0,1 ,#,$ 
respectively by writing 00,10,11, 01 in two consecutive cells. Using this convention, for 0 < * < m, x' 2i # w^i 
and x 2m = W 2 mi which makes the entire y self-delimiting. In our reduction to GCP, x is random and the 
formats of Ra and y chosen to meet the reduction’s needs. A(.) halts if the answer is “no” and enters an 
infinite loop otherwise. Now, W(Ma °y) simulates A(y) for |a :| 4 steps. 

The head of Ma is initially at the left end of its tape. First, it writes a #; then using the space containing 
the encoding of |ie| in x for counting, Ma checks if |a;| is indeed as specified by x. Next, it overwrites x' 0 wq by 
$; Then, it transforms the tape contents to #x$Wi$W 3 $Ws ■ ■ • W 2 m-i# and then to #x$wi,ws ■ • ■W 2 m- 1 #. 
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We now outline a method to ensure that for some prime p > 2\x\ A that (on a “Yes” instance) the head 
of W can be back, in the same cell it started with after (p — l)/2 steps. Suppose Ma enters a loop of 
writing/reading a 0 in cells r and r + 1. Since W works in cycles where it simulates one step of M at cell 
number r in 4r + d steps, we proceed as follows. Assume W is off by S (can be positive or negative) at 
instant (p— l)/2 from where it started at the initial step. Then we modify the starting position of the head 
of W by moving it [5/2\ squares. Then the head of W would reach the same cell as the new starting position 
at the required instant. 

The table of space-time history of simulation of A(y) by W for v steps consists of the configurations of 
W at instants i < v in the i-th row . Here, a cell in the configuration consists of a tape alphabet or the 
state, together with the information to which side (left or right) of the head the cell lies. The state transition 
of the head depends on the contents of the cell to its left. Modify the table in the first row cells where the 
witness bits in y are expected by entering the symbol ?, which change (non-deterministically) into a witness 
in the next instant; also, add a new 0-th row with every cell containing a new symbol %. Given such a table 
(where y is a “Yes” instance), for each point shared by four cells, create a tile with the ccll-contents written 
in the respective corners of the tile. This yields the set of legal tiles for RRTP and the bottom two rows 
of the table yield a “starting” string of tiles. In RRTP, the tiling size is (p — l)/2 and the tiling patterns 
correspond to the space-time history of this simulation of Ma by W. 

RRTP is complete: Let u be any UTM and x be random. We find p (by exhaustive search), choose x' at 
random and pad w as above, so that \y\ = (p — l)/2. Now, the resulting tiling instance has a solution if and 
only if u has an accepting computation on x. 

7.2 Displaying the UTM computations on the even grid 

In this section we will refer only to the nodes on the even grid, unless we indicate otherwise. The reader may 
wish to consult the figures l.Left and 1.Right throughout this section. We represent a cell in the space-time 
history by a node Zi € V in the even grid: the symbol in the cell is encoded on the outgoing H and V links 
from Zi. We divide the links between two even grid nodes into classes: <r, S, Li, Ri, Zi. Here a, S encode 
the tape and state symbols, and they form subclasses of M. For simplicity, we omit the directions of these 
links (e.g. horizontal, vertical), and they will be clear from the context. To facilitate transfer of information 
between rows of the even grid, we use transfer links Li, Ri, Zi that carry no information besides their type; 
in addition transfer links help enforce proper transitions involving left and right movements of the head as 
we shall see later. 

Every even row of the even grid, from left to right, has a sequence of grey nodes, a red node, and a 
sequence of green nodes. In odd rows, this order of colors is reversed. The red node corresponds to the 
position of the head. Every even row of the tiling pattern represents a moment of time in the space-time 
history. Every odd row is used to copy the contents of the tape cells in the previous even row to the next 
even row; in the neighborhood of the red node (i.e. the head) the odd rows participate in enforcing and 
displaying proper state transitions (See figures l.Left, 1.Right). 

While the space-time history of a UTM is planar, our even grid is toroidal. To enable wrap around, we 
use between the bottom row and the topmost row special V-links that can appear between only these two 
rows. To economize our usage of the colors, the special V-links connect like colored nodes, and so the head 
of W must look at cells in the same column in the top and bottom rows. We now describe how localizing 
the special V-links only in the top and bottom rows. We have split the input chain into two parts ic\ and 
I2 so that the nodes in the bottom row have no incoming 12-links while all other nodes in the even grid 
do. Then it suffices that we choose the standard coloration so that any node with a special incoming V-link 
cannot have an incoming T-links. Furthermore, to enable the vertical wraparound, we allow these V-links 
to be consistent with any H-links, so that the symbol and state information encoded in the bottom and the 
topmost rows need not have any relation unlike other adjacent rows in the even grid. 

We now describe how to color nodes not on the even grid. We color every such node z% and for all such 
Zi, there are two edges between Zi,h 2 (Zi) which are colored red-blank and there is single red edge between 
Zi and v 2 (zi). We allow the grey/green transition of self-loops at the vertical border. 
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We now describe how a state transition of (Si, a{) —> (S 2 , <J 2 ,D), where D = Left or Right (See figures 
l.Left, 1.Right) of the UTM W will be displayed on the even grid. In essence, we will be simulating 
the Turing Machine computations using the coloring rules admissible under the standard coloration. The 
simulation is self-enforcing due to the rules 1-5 below. First, (see section 7.3) the bottom row is colored to 
encode the simulated program, its input and non-deterministic guess symbols for the witness in that order. 
The rules in section 7.4 force the moment * + 1 in UTM computation to be encoded on row 2i + 2 of the 
even grid, assuming row 2 i of the even grid properly encodes moment i. Inductively, the whole computation 
must appear on the even grid. 


7.3 Initializing the Bottom Row 

The bottom row begins with a sequence of grey nodes that constitute the program segment , which ends at a 
red node for the TM head, is followed by a green segment. We encode the Turing Machine M in the program 
segment as mi... toimi G {*, 0,1}* and terminate it with the symbol A denoting the starting state of the 
TM. The green segment is encoded as &i?& 2 ? • • • ^b v , where 6 ,/s from {0,1} form M’s input and the symbol 
? stands for the non-deterministic guess of the witness digits. (This odd looking mixing of input bits and the 
non-deterministic guess bits is to enable copying of the inputs as described next in this subsection.) Hence 
the whole bottom row can be written as miW 2 ... 771 |m| 4 &i? 62 ? • ■ ■ 

We choose the set of legal spots so that the alternation of hi and ? in the green segment is forced to 
continue on all H-links in the bottom row until it wraps back to t\. The symbol ? on horizontal edges is 
used to implement non-deterministic guesses as follows: since we encode our tape symbols on the outgoing 
V-links, it is sufficient to allow in the green segment two types of outgoing V-links in the bottom row green 
segment that encode 0/1. Then the coloring adversary can non-deterministically choose these V-links to 
encode the witness in binary. 

Recall that the bottom row of the even grid contains looped nodes Zi from the initial segment of input 

chain zq, tq, z\,v\,... such that Zi —> Zi+i; also the random input to the UTM is encoded as the connectivity 
patterns between successive input nodes (vi,Vi+±. We now indicate how the UTM input is copied on to the 
bottom row (See figure 4).The connectivity between the nodes vt and Vi+i is first copied on to some adjacent 
links and then is transferred to H-link using the following coloring scheme: the edge ( Zi,Vi ) is green or 
red depending on whether (vi, fj+i) is present or absent; the edges between Zi+i,Vi are colored with non¬ 
blank colors to encode presence or absence of ( Vi+i,Vi ) and whether Zi belongs to the bottom row or not. 
Both bottom row colorings of [ 2 ^+ 1 , ?y] are compatible with ?. Note that the transfer could be checked by 
inspecting spots on v^, Zi, Wj+i and z^, Zi+i, Vi. 


7.4 Simulation of State Transitions 

Let ((Ti,S'i) 1 —> (<t 2 , S 2 , D) be a transition and let (see figure l.Leftand 1.Right) Zi —A Zj —U Zk and 
Zk H(tfe). A quick look at the the figures l.Left and 1 .Right reveals how the direction of motion, new 
symbol and the new state are computed. In the figure l.Left, the reader may consult the numbered sequence 
which indicates the sequence in which the colorings of the links are forced and the corresponding numbering 
for the figure 1.Right is omitted. Each of these three quantities are computed in three distinct triangles. 
Each of these triangles contains S 1 and u\ encoded on two sides and the new quantity appears on the third 
side. These new quantities are then appropriately copied on to the links two rows above in the even grid. 
The so-called transfer links Li , Ri in these figures facilitate this copying. We now describe this formally. 

First, the current state and symbol are copied on M-links: f; —4 Zj. and t r —A Zj, for some distinct l, r. 
Then 62,02 are computed in triangles Zi,Zj,ti and Zj,Zk,t r , and encoded on M-links over [ti, Zi],[t r , Zk] as 
below, ti —> Zk and the nodes H m V(zi), H m V 2 (z ,:) are red where m = ±1 depending on the direction D : 

D =Left : m = — 1. First, ti Zi, and t r Zk- Also, t r has SVlinks to V(^) and V 2 (zi), as forced by 
the triangles formed by L 2 and Lj, with tj. Similarly, triangles formed by Lq^Li and Z\ with ti 
force (72-links to V(z,) and V(zj). Finally, S2 and are copied on H-links at V 2 (zj) and \ 2 {zj). 
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D =Right 


TO = 1. t r 


s 2 


Zk , t r 


Zj, and ti 


copying of S2 to the node V 2 (zk)- Also, ti —> Zk 

v 2 (^). 


Zi . Similar to the left move, R\ and R2 force the 
—4 V(2fc) V 2 (zfc), which ensures copying cr to 


Our choice of standard coloration implies the following rules which make sure that any coloring of G yields 
a correct simulation of W. The first item describes state transitions. Rules [2 — 4] enforce that the symbols 
encoded by even grid edges not adjacent to a red node are copied to the nodes in next row without any 
change. This is since the TM tape cells not being visited by the head should not change. Rules [5] and E 
in section [jj guarantee that M-edges which the simulation makes use. 

1 Let Zi —^ Zj —4. Zk- Then, Zi,Zj,Zk are consecutive nodes in a row of the even grid, zj is red and the 

choices in (1—3) below are determined by D =Left or D =Right respectively. We now indicate how a 
motif of transfer links surrounding the red nodes in the even grid is guaranteed. First the M-links are 
ensured by [5] below and E in section |oj, which when incident on a red node on the even grid forces 
an outgoing Lq or Rq type V-link depending on the direction of the head movement. These two links 
enforce the Z\,Z 2 links in the figures, which in turn enforce the Li or Ri links shown in the figures. 
The Li,Ri,Zi links have fixed directions and induce a connected subgraph, and they can be verified 
using conditions on spots. 

1. Either Zi Zk —L, V(zj) and Zi V(zj) or Zi Zk -^4 V(zk) and z% V(zi ). In 

either case, all the Li,Zi links in figure l.Left or all the Ri,Zi links in the figure 1.Right must 
be present as shown. 

2. If ti —4 Zj then ti 

3. If t r -^4 Zk then, t r —G Zk 

2 If V -1 ^) —> Zi, then Zi —^-4 H (zt) unless the incoming V-link is of the type special to the bottom row. 

3 Let Zi be green or grey and tj —A z-i V(zj). Then, oy = <7. Also, if t; — 4 z * —^4 Zj,ti -^4 zj , then 

ay =02 

4 Two links incident on a red node or coming out of any (common) node Zi with H(tj) green or grey may 

not encode different symbols or different states. 

5 A node has an incident M-link to T encoding a state or d3-link with a blank edge (counted as an M-link) 

but not both. If Zi is red or H _1 (z i ) —A Zi then d 3 -blanks at z. t are forbidden. 

We now detail how any sequence of transitions can be handled even though the computation simulates 
more steps than tournament has nodes Moreover, we do not want too many links be required to exist between 
any particular ti or t r and a number of the Z{ that are adjacent to the trajectory of the red nodes encoding 
the state; else we will be unable to embed such a structure in a random graph. 

From the figures it is clear that after a transition the next even numbered row in the even grid reflects 
a new TM configuration using the same conventions as the previous even row. Also, the TM state before 
the transition is encoded on the M-link to the tournament node t-i and the new state is on the M- link to 
the node t r . One may choose as t r any tj distinct from ti and t\ . This is also important for showing that 
the structures required for the simulation can be embedded in random graphs: Given the knowledge of the 
witness for the tiling problem, in G' one can choose any suitable set of f(’s so that 1 < r < 0.9fc. The range 
of r also enables us ensure that the M-links do not interfere with the coloring rules that enforce monotone 
ordering of the input chain as follows. A link from z t to tj contains a blank if and only if it encodes a state. If 
Zi —^4 tj. j < Z(i), Zi is treated as having all edges grey to tj (i.e. a “don’t-care” condition) for the purposes 
of comparing codes in section In a.e. G, one can take l(i) > 0.9fc, for all i, since ( by proposition |j) the 
codes of nodes in Ut are distinct even when truncated to trailing 0.9fc digits. At any even grid node that 


18 


is not adjacent to a red node in the even grid, we allow M-links to encode the tape symbols on V-links 
between two gray or green nodes. All the Si, at, Li, Ri, Zi links between even grid nodes are colored with 
non-blank colors. 


7.5 Existence of di-embeddings into a random graph 

Recall that a.e. graph G sampled by the reduction R(X, to) is in J\f, which by definition is the set of graphs 
that have unique largest tournaments and the number of looped and un-looped nodes as required (see the 
paragraphs preceding Remark [|) and that A(A I) = 1 /0(n 2 ). Here the tiling instance X determines the edges 
between successive input nodes, while apart from the sets and sizes in PI- P4 in section 4.1, ui determines 


all other edges not contained in the tournament. We need to account for the fact that for a graph G £ Af 
with a largest tournament T, the codes of the nodes in Ut need not be distinct while our reduction needs 
them to be. 

Let X be fixed. We have described the graph G' (with a tournament T') and its coloration that would 
encode the tiling pattern. From its construction, it can be seen that the degree of nodes in the graph G' — T' 
defining the di-enrbedding g x in section 5.1 is 0(1). We now show that G' can be embedded in a.e. G. 

Now, we say G is strongly compatible with G' (and write G' ss G) if G has a tournament T of size 
\T'\ = k and has the sizes of the sets of nodes in P1-P4 are as require 

Let A be the distribution of graphs generated by the reduction. Forcing the tournament is necessary since 
the reduction needs to know the largest tournament but it would be hard to find it. Forcing the sizes of the 
various un-looped and looped nodes is not necessary but we do so for convenience. We leave all other required 
properties to chance. We now show that for a.e. graph thus generated has [X k {G) = 1] A [3g : G' i—> G] A [D], 
where D denotes the event “the input node codes w.r.t. the forced tournament are distinct” and [3g : G' i—> G] 
denotes the event the required di-embedding exists. We now consider each of these events. 

First, we show that A[V/ C (G) ^ 1] = o(l). Indeed, using Prob[A\B] < Prob[A]/prob[B] and that c is 
chosen large enough in lemma [l]. 


X[X k (G) ± 1] = X c [X k > 2| G' « G] < A c [V fc > 2]/A c [G' 


G] <= m~ c p 3 y 


= o(l). 


Secondly, A[U] = 1 — o(l), since the conditioning P1-P4 merely fixes the size of Ut exactly as in proposition 
||. Finally we show that A(3g : G' G) = 1 — o(l) using the embedding lemma. Since G has a forced 
tournament, gft.'f) = U,i < k can be satisfied trivially. Next, we extend g to L' T so that g(L ' T ) = Lt • Every 
edge from a node Zi in Lt to another node in Ut U Lt or T is chosen independently and with probability 
1/4 or 1/3 respectively; also for every z\ the number of edges to U' T U L' T U T' in G' — T' is 0(1). So, the 
embedding lemma yields the extension. Similarly, we extend g to include I/g. 


Acknowledgments 

We thank Peter Gacs for discussions, Marvin Minsky for comments about small UTMs. The proof of Lemma 
2 is simplified by an argument due to Zoltan Fiiredi. 


References 

[1] D. Angluin, L.G. Valiant, Fast Probabilistic Algorithms for Hamilton Circuits and Matchings, J. Com¬ 
puter Syst. Sci , 18, 1979, 155-193. 

[2] L. Babai, P. Erdos, M. Selkow, Random Graph Isomorphism, SIAM Journal of Computing 9 (1980) 
628-635. 

[3] S. Ben-David, B. Chor, O. Goldreich,M. Luby, On the Theory of Average Case Complexity, 21st Annual 
ACM Symposium on Theory of Computing , ACM, 1989, 204-216. 


19 




[4] M. Blum, S. Micali, How to generate Cryptographically Strong Sequences of Pseudo Random Bits, 
FOCS Symp. Proc. (1982); SIAM J. on Computing, (1984) 850-864. 

[5] B. Bollobas, Extremal Graph Theory, Academic Press (1985). 

[6] B. Bollobas, Random Graphs, Academic Press (1985). 

[7] W. Diffie, M. E. Heilman. New Directions in Cryptography. IEEE transactions on Info. Theory, IT-22: 
644-654, 1976. 

[8] O. Goldreich, Towards a theory of Average Case Completeness, (a survey), Tech Report, Teclmion, 
Israel (1988). 

[9] O. Goldreich, S. Goldwasser, S. Micali, How to Construct Random Functions. J. ACM, 33/4: 792-807, 
1986. 

[10] Yu. Gurevich, Complete and Incomplete Randomized NP Problems 28th Annual Symposium on Foun¬ 
dations of Computer Science (1987), 111-117. 

[11] Yu. Gurevich, Average Case Completeness, Tech Report, University of Michigan, Ann Arbor, 1988. (To 
appear in Journal of Computer and System Sciences) 

[12] Yu. Gurevich, S. Shelah, Expected computation time for Hamilton path problem, SIAM Journal of 
Computing 16 (1987) 486-502. 

[13] Yu. Gurevich, Matrix decomposition is complete for the average case, 31 Annual Symposium on Foun¬ 
dations of Computer Science (1990). 

[Gu2] Yu. Gurevich, “The Challenger-Solver game: Variations on the Theme of P=?NP”, Bulletin of Euro¬ 
pean Assoc, for Theor. Computer Science, October 1989, 112-121. 

[Gu] u. Gurevich, Average Case Complexity, ICALP 91. (Invited Talk) 

[14] N. Ikeno, A 6-symbol 10-state Universal Turing Machine, Proceedings, Institute of Electrical Communi¬ 
cations, (1958) Tokyo. 

[15] R. Impagliazzo, L.A. Levin, No better ways to generate hard NP instances than picking uniformly at 
random, IEEE Conference on Foundations of Computer Science, 1990 

[16] R. Impagliazzo, S. R.udich, Limits on provable consequences of one-way functions, ACM Symposium on 
Theory of Computing, 1989, pp. 44-61. 

[17] R. Karp. The Probabilistic Analysis of some Combinatorial Search Algorithms. Algorithms and Com¬ 
plexity. J.F. Traub, ed., Academic Press, NY 1976, pp. 1-19. 

[18] R. Karp, J.K. Lenstra, C.J.H. McDiarmid, A.H.G. Rinnoy Kan, Probabilistic Analysis, in Combinatorial 
optimization : annotated bibliographies, M. O’hEigeartaigh, J.K. Lenstra, A.H.G. Rinnoy Kan, Eds New 
York, Wiley, 1985. 

[19] D. Johnson, The NP-completeness column-an ongoing guide, Journal of Algorithms 5 (1984), 284-299. 

[20] J.C Lagarias, A.M. Odlyzko, Solving Low density subset sum problems, in Proc. 2fth Ann. Symp. on 
Foundations of Computer Science, (1983), pp 1-10. 

[21] A.K. Lenstra, H.W. Lenstra, The development of the number field sieve, Springer Verlag, (1991). 

[22] L.A. Levin, Average case complete problems, SIAM Journal of Computing 15 (1986) 285-6. 


20 



[23] M.L.Minsky, Computation: Finite and Infinite Machines, Prentice Hall (1967) 

[24] Lutz Priese, Towards a precise characterization of the complexity of Universal and non-universal Turing 
Machines, SIAM Journal of Computing, Vol 8 No 4, (1979) pp 507-523 

[25] A. Shamir, A polynomial algorithm for breaking the basic Merkle-Hellman Cryptosystem, IEEE Sym¬ 
posium on Foundations of Computer Science (1982), 145-152. 

[26] C.E.Shannon, A Universal Turing Machine with two internal states , in Automata Studies, edited by 
C.E. Shannon and J.McCarthy, Princeton University Press, (1956) 157-166. 

[27] R. Venkatesan, Average Case Intractability, Ph.D. Thesis, Department of Computer Science, Boston 
University. 

[28] R. Venkatesan, L.A. Levin, Random Instances of a Graph Coloring Problem Are Hard, ACM Symposium 
on theory of Computing, (1988) 217-222. 

[29] R. Venkatesan, S. Rajagopalan, Average case intractability of Matrix and Diophantine Problems, ACM 
Symp. on Theory of Computing, (1992) 632-642. 

[30] A.C. Yao, Theory and Applications of Trapdoor Functions, IEEE Symp. on Foundations of Computer 
Science (1982) 80-91. 

[31] J. Wang, Average Case Completeness of a Word Problem for Groups, ACM Symposium on Theory of 
Computing, (1995) 325-334 

[32] Watanabe, 5-symbol 8-state and 5-symbol 6-state Turing Machines, , Jour of ACM, 10) (1961) pp 
423-431 


21 




Figl .LEFT: Simulation of a transition of the Turing Machine 
on a left move (S ,, er,) ► ( S 2 ,ct 2 ,L) 
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Fig 4. Initializing the 
Bottom Row 
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Figl .RIGHT: Simulation of a transition of the Turing Machine on 
a right move (5,,ex,) >-(S 2 ,a 7 ,R) 
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Fig 3. Bottom Row of 
the Primary Grid 
contains initial nodes of 
the input chain 
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